Support client-side parsing of certain log files

[henrikjohansen]

Many logfiles are written in CSV format - given the header of such a file the collector should stuff the correct values into fields and append those to the GELF message.

Perhaps you should even support GROK patterns for arbitrary logs ...

[drewmmiranda]

I was looking at this myself. I have a lot of NX log parsing for logs like IIS (space separated). I'm working on rewriting these rules as server side extractors i'm noticing that if the log format fields are changed on the IIS server (adding or removing logged fields) it will break the regexes.

[pdepaepe]

This is definitely a killer feature. Falling over the input extractors/groks parts from graylog-server to collector and let the client to structure its own logs.

[zolech]

+1

I would gladly change my td-agents for collector but without parsing feature it is useless to me